Comment

Comment by CrLf

Most of what people see as "SELinux" is actually the default policy, which started out as way too strict. Then SELinux-enabled distros such as Red Hat moved to a policy that only applies to system services, and leaves user-launched binaries as if SELinux was disabled.

And even for system services, you can disable SELinux for one service (permissive mode) and leave it enabled for the rest.

This has been the case for more than 10 years, but the damage was done. It's now very hard for users even considering learning the basics (which are not hard).

parent CrLf 4 months ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton